MDKSA-2006:065
- Package name
- kaffeine
- Date
- 2006-04-05
- Advisory ID
- MDKSA-2006:065
- Affected versions
- 2006.0 i586 , 2006.0 x86_64
Problem description
Marcus Meissner discovered Kaffeine contains an unchecked buffer while
creating HTTP request headers for fetching remote RAM playlists, which
allows overflowing a heap allocated buffer. As a result, remotely
supplied RAM playlists can be used to execute arbitrary code on the
client machine.
Updated packages have been patched to correct this issue.
Updated packages
2006.0 i586
221dc2b4b5a7c83d2071c076ee3493ec 2006.0/RPMS/kaffeine-0.7-6.1.20060mdk.i586.rpm 2c7e274246e1dc740f8697c0f210925d 2006.0/RPMS/libkaffeine0-0.7-6.1.20060mdk.i586.rpm 9b5bb05954386af7505784a955243b25 2006.0/RPMS/libkaffeine0-devel-0.7-6.1.20060mdk.i586.rpm 7b313e26ca91b6f306b28be4fb9f5aa2 2006.0/SRPMS/kaffeine-0.7-6.1.20060mdk.src.rpm
2006.0 x86_64
8f4271cab6ec4670ed8e76d6c1711ec9 x86_64/2006.0/RPMS/kaffeine-0.7-6.1.20060mdk.x86_64.rpm fadb3df8afb1d523946fa59298287185 x86_64/2006.0/RPMS/lib64kaffeine0-0.7-6.1.20060mdk.x86_64.rpm 6ed84efb236fb8e0aeccb42bbb00b57b x86_64/2006.0/RPMS/lib64kaffeine0-devel-0.7-6.1.20060mdk.x86_64.rpm 7b313e26ca91b6f306b28be4fb9f5aa2 x86_64/2006.0/SRPMS/kaffeine-0.7-6.1.20060mdk.src.rpm